refactor: switch to use SecureRandom for random strings

2026-10-19 18:56:05 +00:00 · 2024-03-04 17:33:25 +00:00
parent cae4b63599
commit ce30c070bd
6 changed files with 6 additions and 8 deletions
@@ -30,7 +30,7 @@ module HasAuthentication
  end

  def begin_password_reset(return_to = nil)
-    self.password_reset_token = Nifty::Utils::RandomString.generate(length: 24)
+    self.password_reset_token = SecureRandom.alphanumeric(24)
    self.password_reset_token_valid_until = 1.day.from_now
    save!
    AppMailer.password_reset(self, return_to).deliver